Let’s start with the formal information – the administrator of the store is EFFECTIVENESS Anna Sarnacka-Smith, ul. Rodziny Połanieckich 27/81, NIP (tax identification number): 5432072090.
The Short version – the most important information
We care about your privacy, but we also care about your time. That is why we have prepared an abridged version specifying the most important information on privacy protection.
- By creating a user account in the store, placing an order, subscribing to the newsletter, filing a complaint, withdrawing from the contract or simply contacting us, you provide us with your personal data and we guarantee that your data remains confidential, safe and is not made available to any third party without your explicit consent.
- The processing of your data is entrusted only to proven and reliable entities providing services associated with personal data provision.
- We use analytical tools, such as Google Analytics, which collect anonymous information about your visits on the website, such as the pages you viewed, the time you spent on the website or transfers between particular pages. Google LCC cookies regarding the Google Analytics service are used for this purpose.
- We embed YouTube videos on the effectiveness.pl website. When you play such videos, cookies of Google LLC regarding YouTube are used.
- On our store website we provide social functions such as buttons and social network widgets, which may involve the use of social network administrators’ cookies.
- We use our own cookies for the proper operation of effectiveness.pl.
If you do not find the information above sufficient, more details follow below.
The controller of your personal data within the meaning of the provisions on personal data protection is EFFECTIVENESS Anna Sarnacka-Smith, ul. Rodziny Połanieckich 27/81, NIP (tax identification number): 5432072090.
The purposes, legal basis and period of processing personal data are indicated separately with respect to each purpose for data processing (see: a detailed description of different purposes for data processing).
Rights. The GDPR provides you with potential rights associated with the processing of your personal data:
- the right of access to personal data,
- the right to rectification of personal data,
- the right to erasure of personal data,
- the right to restrict personal data processing,
- the right to object against personal data processing,
- the right to data portability,
- the right to lodge a complaint with a supervisory authority,
- the right to revoke consent to process personal data, if such a consent was given.
Rules associated with the rights indicated above have been described in detail in Articles 16 – 21 of the GDPR. We encourage you to read these provisions. For our part, we consider it necessary to explain to you that the above-mentioned rights are not absolute and that you will not be entitled to them with regard to all actions related to the processing of your personal data. For your convenience, we have made every effort to indicate the rights to which you are entitled as part of the individual description of data processing operations.
We emphasise that you always have one of the rights indicated above – if you believe that we have violated the provisions on personal data protection in the course of processing of your personal data, you have the right to lodge a complaint with the supervisory body (President of the Office for Personal Data Protection).
Safety. We guarantee the confidentiality of any personal data you provide us with. We ensure taking all security measures and measures necessary to protect personal data required by the provisions on personal data protection. Personal data is collected with due diligence and appropriately protected against unauthorised access.
List of entrustments. We entrust the processing of personal data to the following entities:
- H88 S.A. ul. Franklina Roosevelta 22, 60-829 Poznań– for the purpose of storing personal data on a server,
- GetResponse Sp. z o.o., ul. Arkońska 6, A3, 80-387 Gdańsk – for the purpose of using the GetResponse mailing system, in which data of newsletter subscribers are processed,
- Kancelaria Rachunkowo – Podatkowa Adam Jeżak [Accounting and Tax Office], ul. Mokotowska 1, 00-640 Warsaw – for the purpose of using the invoicing system and accounting services.
All entities entrusted with the processing of personal data guarantee the use of appropriate security measures and the security of personal data required by law.
Objectives and processing operations
User Account. When creating a user account in the store, you must enter your email address and define your account password. Providing data is voluntary, but necessary to create an account. As part of editing your user profile, you can provide further data about yourself, i.e. your name, billing address and shipping address. These data are provided entirely voluntarily. You can have an account without providing further data. In such a case you will need to enter this data manually every time you place an order.
The data entered by you as part of the user account is processed only to maintain the account and provide you with the possibility of using it. The aim of providing data in the user account is to make placing orders in the store easer: data are automatically prompted in the order form.
The legal basis for the processing of your personal data as part of the user account is performing of the account agreement, which you conclude based on the terms and conditions of the store – Article 6 (1) b) of the GDPR.
Data collected on the user account are processed as part of the WooCommerce system and are stored on a server provided by H88 S.A.
Your data will be processed as part of the account as long as you have an account on the website. After the account has been removed, your data will be deleted from the database, except for the data regarding the submitted orders.
You can access your personal data processed within your account at any time by logging in to your user account. After logging in to your account you can modify your data at any time, as well as delete them, except for the data regarding the submitted orders. You can also decide to delete the account at any point in time.
In relation to the data collected in the user account, you also have the right to data portability referred to in Article 20 of the GDPR.
Orders. When you place an order, you have to provide personal data necessary for the performance of your order, that is: your name and surname, invoicing address, shipping address, email address, telephone number. Providing data is voluntary, however necessary for the order to be placed.
The data provided to us in connection with the order are processed for the purpose of fulfilling the order (Article 6 (1) b of the GDPR), issuing an invoice (Art. 6 (1) (c) of the GDPR), including an invoice in our accounting records (Article 6 (1) (c) of the GDPR) and for archival and statistical purposes (Article 6 (1) (f) of the GDPR).
Data in the order placed via the store are processed within the WooCommerce system and are stored on a server provided by H88 S.A. Data included in individual orders are processed within the email service and are stored on a server provided by H88 S.A.
If you have a user account in the store and the order has been placed via the store, your order will be visible in the order history of that account.
Each order is documented by way of an invoice. Invoices are issued using software provided by our accounting and tax office: Kancelaria Rachunkowo – Podatkowa Adam Jeżak. The data visible on the invoices are therefore also processed by that entity in connection with accounting services.
Orders are also registered in our internal database for archival and statistical purposes.
Data about orders will be processed for the time necessary to perform the contract, and then until the expiry of the period of limitation of claims under the contract. In addition, after this date, the data may still be processed by us for statistical purposes. Furthermore, keep in mind that we have an obligation to store invoices with your personal data for a period of 5 years from the end of the tax year in which the tax obligation arose.
You cannot rectify data regarding orders after those orders have been processed. Furthermore, you cannot object to the processing of data and require the deletion of data until the expiry of the period of limitation of claims under the contract. Similarly, you cannot object to the processing of data and request removal of data contained in invoices. After the expiry of the period of limitation of claims under the contract, you can object to the processing of your data for statistical purposes, as well as request the removal of your data from our database.
In relation to data regarding orders, you also have the right to portability of data, referred to Article 20 of the GDPR.
Newsletter. If you want to subscribe to our newsletter, you must provide us with your email address via the newsletter subscription form.
We use the data provided to us when subscribing to the newsletter to send you the newsletter, and the legal basis for their processing is your consent (Article 6 (1) a) of the GDPR) which you express when you subscribe to the newsletter.
The data are processed within the GetResponse mailing system and are stored on a server provided by GetResponse Sp. z o.o.
Data will be processed in the course of functioning of newsletter, unless you unsubscribe from the newsletter, which will result in the deleting of your data from the database.
You have the right to rectify the data saved in the newsletter database at any time, as well as to delete them, thus unsubscribing from the newsletter. You also have the right to data portability referred to in Article 20 of the GDPR.
Complaints and withdrawal from the contract. If you make a complaint or withdraw from the contract, you provide us with personal data contained in the content of the complaint or a statement of withdrawal, which includes your name, address, telephone number, email address, bank account number.
The data provided to us in connection with the submission of a complaint or withdrawal from the contract are used to implement the complaint procedure or the procedure for withdrawing from the contract (Article 6 (1) (c) of the GDPR).
The data will be processed for the time necessary to carry out the complaint procedure or the withdrawal procedure. Complaints and statements of withdrawal from the contract may also be archived for statistical purposes.
You cannot rectify data contained in complaints and statements of withdrawal from the contract. Furthermore, you cannot object to the processing of data and require the deletion of data until the expiry of the period of limitation of claims under the contract. However, you may object to the processing of your data for statistical purposes, as well as request removal of your data from our database after the expiry of the period of limitation of claims under the contract.
Email communication. By contacting us via electronic email you naturally provide us with your email address as the sender’s address. In addition, you may also include other personal data in the content of your mail.
In this case your data is processed in order to contact you, and the basis for the processing is Article 6 (1) a) of the GDPR, i.e. your consent resulting from initiating contact with us. The legal basis for processing after the end of the contact is a justified purpose in the form of archiving correspondence for internal needs (Article 6 (1) c) of the GDPR).
The content of the correspondence can be archived and we cannot clearly determine when it will be deleted. You have the right to request to be presented with the history of communication which you carried out with us (provided it had been archived), as well as request its removal, unless its archiving is justified due to our overriding interests, e.g. protection against potential claims on your part.
Cookies and other tracking technologies
Cookies are small text files stored on your device (e.g. computer, tablet, smartphone) which may be read by our electronic information system.
Cookies can be divided into first-party cookies and third-party cookies.
Learn more below.
First-party cookies. We use first-party cookies to ensure the correct functioning of the store, in particular the correct functioning of the order process, cart, user account.
Third-party cookies. Our store, like many others nowadays, uses functions provided by third parties, which involves using third-party cookies. The use of this type of cookies is described below.
Video. We display YouTube videos on our website. Viewing such videos involves the use of Google LLC cookies for the YouTube service. If you do not want such cookies to be used, refrain from displaying the videos embedded on the website.
Social features. On our website we provide social functions such as buttons and widgets for observing our social profiles and buttons to share content on social networks. Using these features may involve using cookies of social media administrators, such as Facebook, Twitter, Google+, LinkedIN.
Using the effectiveness.pl website involves sending requests to the server on which the website is stored. Each request directed to the server is saved in the server logs.
The logs include i.a. your IP address, date and time of the server, information on the Internet browser and the operational system which you use. Logs are saved and stored on the server.
Data saved on server logs is not associated with a specific person using the website and are not used to identify you.
The server logs constitute only auxiliary material for administrating the website, and their content is not disclosed to anyone beside the persons authorised to administrate the server.